@drunk-pulumi/azure-components 0.0.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/PulumiPlugin.yaml +1 -0
- package/README.md +1 -0
- package/ResourceBuilder.d.ts +54 -0
- package/ResourceBuilder.js +71 -0
- package/aks/AzKubernetes.d.ts +55 -0
- package/aks/AzKubernetes.js +288 -0
- package/aks/ContainerRegistry.d.ts +19 -0
- package/aks/ContainerRegistry.js +119 -0
- package/aks/helpers.d.ts +6 -0
- package/aks/helpers.js +52 -0
- package/aks/index.d.ts +3 -0
- package/aks/index.js +43 -0
- package/app/AppCert.d.ts +15 -0
- package/app/AppCert.js +74 -0
- package/app/AppConfig.d.ts +18 -0
- package/app/AppConfig.js +124 -0
- package/app/AppService.d.ts +69 -0
- package/app/AppService.js +122 -0
- package/app/IoTHub.d.ts +15 -0
- package/app/IoTHub.js +80 -0
- package/app/LogicApp.d.ts +19 -0
- package/app/LogicApp.js +77 -0
- package/app/SignalR.d.ts +45 -0
- package/app/SignalR.js +125 -0
- package/app/index.d.ts +6 -0
- package/app/index.js +23 -0
- package/azAd/AppRegistration.d.ts +52 -0
- package/azAd/AppRegistration.js +165 -0
- package/azAd/AzRole.d.ts +14 -0
- package/azAd/AzRole.js +72 -0
- package/azAd/CustomRoles.d.ts +10 -0
- package/azAd/CustomRoles.js +73 -0
- package/azAd/GroupRole.d.ts +29 -0
- package/azAd/GroupRole.js +107 -0
- package/azAd/RoleAssignment.d.ts +15 -0
- package/azAd/RoleAssignment.js +63 -0
- package/azAd/UserAssignedIdentity.d.ts +17 -0
- package/azAd/UserAssignedIdentity.js +76 -0
- package/azAd/helpers/graphBuiltIn.d.ts +14 -0
- package/azAd/helpers/graphBuiltIn.js +5134 -0
- package/azAd/helpers/index.d.ts +3 -0
- package/azAd/helpers/index.js +39 -0
- package/azAd/helpers/rolesBuiltIn.d.ts +90 -0
- package/azAd/helpers/rolesBuiltIn.js +18601 -0
- package/azAd/helpers/rsRoleDefinition.d.ts +62 -0
- package/azAd/helpers/rsRoleDefinition.js +120 -0
- package/azAd/index.d.ts +7 -0
- package/azAd/index.js +24 -0
- package/base/BaseComponent.d.ts +53 -0
- package/base/BaseComponent.js +98 -0
- package/base/BaseResourceComponent.d.ts +108 -0
- package/base/BaseResourceComponent.js +180 -0
- package/base/helpers.d.ts +12 -0
- package/base/helpers.js +29 -0
- package/base/index.d.ts +3 -0
- package/base/index.js +43 -0
- package/common/PGPGenerator.d.ts +26 -0
- package/common/PGPGenerator.js +72 -0
- package/common/RandomPassword.d.ts +21 -0
- package/common/RandomPassword.js +84 -0
- package/common/RandomString.d.ts +20 -0
- package/common/RandomString.js +74 -0
- package/common/ResourceLocker.d.ts +9 -0
- package/common/ResourceLocker.js +52 -0
- package/common/RsGroup.d.ts +20 -0
- package/common/RsGroup.js +85 -0
- package/common/SshGenerator.d.ts +17 -0
- package/common/SshGenerator.js +66 -0
- package/common/index.d.ts +5 -0
- package/common/index.js +22 -0
- package/database/AzSql.d.ts +71 -0
- package/database/AzSql.js +283 -0
- package/database/MySql.d.ts +35 -0
- package/database/MySql.js +181 -0
- package/database/Postgres.d.ts +32 -0
- package/database/Postgres.js +171 -0
- package/database/Redis.d.ts +26 -0
- package/database/Redis.js +125 -0
- package/database/helpers.d.ts +7 -0
- package/database/helpers.js +52 -0
- package/database/index.d.ts +5 -0
- package/database/index.js +45 -0
- package/helpers/Location/LocationBuiltIn.d.ts +6 -0
- package/helpers/Location/LocationBuiltIn.js +493 -0
- package/helpers/Location/index.d.ts +3 -0
- package/helpers/Location/index.js +25 -0
- package/helpers/autoTags.d.ts +1 -0
- package/helpers/autoTags.js +27 -0
- package/helpers/azureEnv.d.ts +21 -0
- package/helpers/azureEnv.js +102 -0
- package/helpers/configHelper.d.ts +5 -0
- package/helpers/configHelper.js +54 -0
- package/helpers/index.d.ts +4 -0
- package/helpers/index.js +41 -0
- package/helpers/rsHelpers.d.ts +18 -0
- package/helpers/rsHelpers.js +92 -0
- package/helpers/stackEnv.d.ts +4 -0
- package/helpers/stackEnv.js +54 -0
- package/index.d.ts +14 -0
- package/index.js +53 -0
- package/logs/Logs.d.ts +48 -0
- package/logs/Logs.js +154 -0
- package/logs/helpers.d.ts +1 -0
- package/logs/helpers.js +38 -0
- package/logs/index.d.ts +1 -0
- package/logs/index.js +18 -0
- package/package.json +34 -0
- package/services/Automation.d.ts +16 -0
- package/services/Automation.js +85 -0
- package/services/AzSearch.d.ts +20 -0
- package/services/AzSearch.js +113 -0
- package/services/ServiceBus.d.ts +42 -0
- package/services/ServiceBus.js +256 -0
- package/services/index.d.ts +3 -0
- package/services/index.js +20 -0
- package/storage/StorageAccount.d.ts +53 -0
- package/storage/StorageAccount.js +261 -0
- package/storage/helpers.d.ts +24 -0
- package/storage/helpers.js +89 -0
- package/storage/index.d.ts +2 -0
- package/storage/index.js +42 -0
- package/types.d.ts +125 -0
- package/types.js +3 -0
- package/vault/EncryptionKey.d.ts +21 -0
- package/vault/EncryptionKey.js +73 -0
- package/vault/KeyVault.d.ts +31 -0
- package/vault/KeyVault.js +110 -0
- package/vault/VaultSecret.d.ts +23 -0
- package/vault/VaultSecret.js +72 -0
- package/vault/VaultSecrets.d.ts +25 -0
- package/vault/VaultSecrets.js +31 -0
- package/vault/helpers.d.ts +1 -0
- package/vault/helpers.js +13 -0
- package/vault/index.d.ts +5 -0
- package/vault/index.js +45 -0
- package/vm/DiskEncryptionSet.d.ts +16 -0
- package/vm/DiskEncryptionSet.js +74 -0
- package/vm/VirtualMachine.d.ts +45 -0
- package/vm/VirtualMachine.js +192 -0
- package/vm/helpers.d.ts +16 -0
- package/vm/helpers.js +15 -0
- package/vm/index.d.ts +3 -0
- package/vm/index.js +43 -0
- package/vnet/AzCdn.d.ts +44 -0
- package/vnet/AzCdn.js +276 -0
- package/vnet/Basion.d.ts +19 -0
- package/vnet/Basion.js +78 -0
- package/vnet/DnsZone.d.ts +36 -0
- package/vnet/DnsZone.js +113 -0
- package/vnet/Firewall.d.ts +53 -0
- package/vnet/Firewall.js +136 -0
- package/vnet/FirewallPolicies/FirewallPolicyBuilder.d.ts +18 -0
- package/vnet/FirewallPolicies/FirewallPolicyBuilder.js +91 -0
- package/vnet/FirewallPolicies/commonPolicies.d.ts +10 -0
- package/vnet/FirewallPolicies/commonPolicies.js +55 -0
- package/vnet/FirewallPolicies/index.d.ts +0 -0
- package/vnet/FirewallPolicies/index.js +2 -0
- package/vnet/IpAddresses.d.ts +36 -0
- package/vnet/IpAddresses.js +74 -0
- package/vnet/NetworkPeering.d.ts +21 -0
- package/vnet/NetworkPeering.js +85 -0
- package/vnet/PrivateDnsZone.d.ts +38 -0
- package/vnet/PrivateDnsZone.js +111 -0
- package/vnet/PrivateEndpoint.d.ts +43 -0
- package/vnet/PrivateEndpoint.js +181 -0
- package/vnet/RouteTable.d.ts +22 -0
- package/vnet/RouteTable.js +75 -0
- package/vnet/VirtualNetwork.d.ts +99 -0
- package/vnet/VirtualNetwork.js +311 -0
- package/vnet/VpnGateway.d.ts +18 -0
- package/vnet/VpnGateway.js +90 -0
- package/vnet/helpers.d.ts +16 -0
- package/vnet/helpers.js +47 -0
- package/vnet/index.d.ts +13 -0
- package/vnet/index.js +53 -0
- package/vnet/securityRules/SecurityRuleBuilder.d.ts +12 -0
- package/vnet/securityRules/SecurityRuleBuilder.js +55 -0
- package/vnet/securityRules/commonRules.d.ts +9 -0
- package/vnet/securityRules/commonRules.js +94 -0
- package/vnet/securityRules/index.d.ts +2 -0
- package/vnet/securityRules/index.js +19 -0
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.SshGenerator = void 0;
|
|
37
|
+
const azure_providers_1 = require("@drunk-pulumi/azure-providers");
|
|
38
|
+
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
39
|
+
const base_1 = require("../base");
|
|
40
|
+
class SshGenerator extends base_1.BaseResourceComponent {
|
|
41
|
+
publicKey;
|
|
42
|
+
privateKey;
|
|
43
|
+
password;
|
|
44
|
+
constructor(name, args, opts) {
|
|
45
|
+
super('SshGenerator', name, args, opts);
|
|
46
|
+
const ssh = new azure_providers_1.SshKeyResource(name, args, { ...opts, parent: this });
|
|
47
|
+
this.publicKey = ssh.publicKey;
|
|
48
|
+
this.privateKey = ssh.privateKey;
|
|
49
|
+
this.password = pulumi.secret(args.password);
|
|
50
|
+
this.addSecrets({
|
|
51
|
+
publicKey: ssh.publicKey,
|
|
52
|
+
privateKey: ssh.privateKey,
|
|
53
|
+
password: args.password,
|
|
54
|
+
});
|
|
55
|
+
this.registerOutputs();
|
|
56
|
+
}
|
|
57
|
+
getOutputs() {
|
|
58
|
+
return {
|
|
59
|
+
publicKey: this.publicKey,
|
|
60
|
+
privateKey: this.privateKey,
|
|
61
|
+
password: this.password,
|
|
62
|
+
};
|
|
63
|
+
}
|
|
64
|
+
}
|
|
65
|
+
exports.SshGenerator = SshGenerator;
|
|
66
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/common/index.js
ADDED
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./PGPGenerator"), exports);
|
|
18
|
+
__exportStar(require("./RandomPassword"), exports);
|
|
19
|
+
__exportStar(require("./RandomString"), exports);
|
|
20
|
+
__exportStar(require("./RsGroup"), exports);
|
|
21
|
+
__exportStar(require("./SshGenerator"), exports);
|
|
22
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29tbW9uL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxpREFBK0I7QUFDL0IsbURBQWlDO0FBQ2pDLGlEQUErQjtBQUMvQiw0Q0FBMEI7QUFDMUIsaURBQStCIn0=
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
import * as sql from '@pulumi/azure-native/sql';
|
|
2
|
+
import * as pulumi from '@pulumi/pulumi';
|
|
3
|
+
import { BaseArgs, BaseResourceComponent } from '../base/BaseResourceComponent';
|
|
4
|
+
import * as types from '../types';
|
|
5
|
+
export type AzSqlSkuType = {
|
|
6
|
+
/**
|
|
7
|
+
* Capacity of the particular SKU.
|
|
8
|
+
*/
|
|
9
|
+
capacity?: 0 | 50 | 100 | 200 | 300 | 400 | 800 | 1200 | number;
|
|
10
|
+
/**
|
|
11
|
+
* If the service has different generations of hardware, for the same SKU, then that can be captured here.
|
|
12
|
+
*/
|
|
13
|
+
family?: pulumi.Input<string>;
|
|
14
|
+
/**
|
|
15
|
+
* The name of the SKU, typically, a letter + Number code, e.g. P3.
|
|
16
|
+
*/
|
|
17
|
+
name: pulumi.Input<string>;
|
|
18
|
+
/**
|
|
19
|
+
* Size of the particular SKU
|
|
20
|
+
*/
|
|
21
|
+
size?: pulumi.Input<string>;
|
|
22
|
+
/**
|
|
23
|
+
* The tier or edition of the particular SKU, e.g. Basic, Premium.
|
|
24
|
+
*/
|
|
25
|
+
tier?: 'Standard' | 'Basic';
|
|
26
|
+
};
|
|
27
|
+
export interface AzSqlArgs extends BaseArgs, types.WithEncryptionEnabler, types.WithResourceGroupInputs, types.WithGroupRolesArgs, types.WithUserAssignedIdentity, Pick<sql.ServerArgs, 'administratorLogin' | 'federatedClientId' | 'isIPv6Enabled' | 'restrictOutboundNetworkAccess' | 'version'> {
|
|
28
|
+
administrators?: {
|
|
29
|
+
azureAdOnlyAuthentication?: boolean;
|
|
30
|
+
useDefaultUAssignedIdForConnection?: boolean;
|
|
31
|
+
adminGroup: {
|
|
32
|
+
displayName: pulumi.Input<string>;
|
|
33
|
+
objectId: pulumi.Input<string>;
|
|
34
|
+
};
|
|
35
|
+
};
|
|
36
|
+
elasticPool?: Pick<sql.ElasticPoolArgs, 'autoPauseDelay' | 'availabilityZone' | 'highAvailabilityReplicaCount' | 'licenseType' | 'perDatabaseSettings'> & {
|
|
37
|
+
maxSizeGB?: number;
|
|
38
|
+
sku: AzSqlSkuType;
|
|
39
|
+
};
|
|
40
|
+
network?: Omit<types.NetworkArgs, 'bypass' | 'defaultAction' | 'vnetRules'> & {
|
|
41
|
+
acceptAllPublicConnection?: boolean;
|
|
42
|
+
subnets?: pulumi.Input<Array<{
|
|
43
|
+
id: string;
|
|
44
|
+
}>>;
|
|
45
|
+
};
|
|
46
|
+
vulnerabilityAssessment?: {
|
|
47
|
+
logStorage: types.ResourceWithGroupInputs;
|
|
48
|
+
alertEmails: pulumi.Input<string[]>;
|
|
49
|
+
retentionDays?: number;
|
|
50
|
+
};
|
|
51
|
+
lock?: boolean;
|
|
52
|
+
databases?: Record<string, Omit<sql.DatabaseArgs, 'resourceGroupName' | 'serverName' | 'elasticPoolId' | 'encryptionProtector' | 'encryptionProtectorAutoRotation' | 'federatedClientId' | 'preferredEnclaveType' | 'sku'> & {
|
|
53
|
+
/** sample: sku: { name: 'Basic', tier: 'Basic', capacity: 0 } */
|
|
54
|
+
sku?: AzSqlSkuType;
|
|
55
|
+
}>;
|
|
56
|
+
}
|
|
57
|
+
export declare class AzSql extends BaseResourceComponent<AzSqlArgs> {
|
|
58
|
+
readonly id: pulumi.Output<string>;
|
|
59
|
+
readonly resourceName: pulumi.Output<string>;
|
|
60
|
+
constructor(name: string, args: AzSqlArgs, opts?: pulumi.ComponentResourceOptions);
|
|
61
|
+
getOutputs(): {
|
|
62
|
+
id: pulumi.Output<string>;
|
|
63
|
+
resourceName: pulumi.Output<string>;
|
|
64
|
+
};
|
|
65
|
+
private createSql;
|
|
66
|
+
private createNetwork;
|
|
67
|
+
private createElasticPool;
|
|
68
|
+
private createEncryptionProtector;
|
|
69
|
+
private createVulnerabilityAssessment;
|
|
70
|
+
private createDatabases;
|
|
71
|
+
}
|
|
@@ -0,0 +1,283 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.AzSql = void 0;
|
|
37
|
+
const sql = __importStar(require("@pulumi/azure-native/sql"));
|
|
38
|
+
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
39
|
+
const BaseResourceComponent_1 = require("../base/BaseResourceComponent");
|
|
40
|
+
const helpers_1 = require("../helpers");
|
|
41
|
+
const storage_1 = require("../storage");
|
|
42
|
+
const helpers_2 = require("../storage/helpers");
|
|
43
|
+
const vnet = __importStar(require("../vnet"));
|
|
44
|
+
const helpers_3 = require("./helpers");
|
|
45
|
+
class AzSql extends BaseResourceComponent_1.BaseResourceComponent {
|
|
46
|
+
id;
|
|
47
|
+
resourceName;
|
|
48
|
+
constructor(name, args, opts) {
|
|
49
|
+
super('AzSql', name, args, opts);
|
|
50
|
+
const { server, password } = this.createSql();
|
|
51
|
+
const elastic = this.createElasticPool(server);
|
|
52
|
+
this.createVulnerabilityAssessment(server);
|
|
53
|
+
this.createNetwork(server);
|
|
54
|
+
this.createDatabases(server, password, elastic);
|
|
55
|
+
if (args.lock)
|
|
56
|
+
this.lockFromDeleting(server);
|
|
57
|
+
this.id = server.id;
|
|
58
|
+
this.resourceName = server.name;
|
|
59
|
+
this.registerOutputs();
|
|
60
|
+
}
|
|
61
|
+
getOutputs() {
|
|
62
|
+
return {
|
|
63
|
+
id: this.id,
|
|
64
|
+
resourceName: this.resourceName,
|
|
65
|
+
};
|
|
66
|
+
}
|
|
67
|
+
createSql() {
|
|
68
|
+
const { rsGroup, enableEncryption, defaultUAssignedId, administrators, network, lock, administratorLogin, ...props } = this.args;
|
|
69
|
+
const adminLogin = administratorLogin ?? pulumi.interpolate `${this.name}-admin-${this.createRandomString().value}`;
|
|
70
|
+
const password = this.createPassword();
|
|
71
|
+
const encryptionKey = enableEncryption ? this.getEncryptionKey({ keySize: 3072 }) : undefined;
|
|
72
|
+
const server = new sql.Server(this.name, {
|
|
73
|
+
...props,
|
|
74
|
+
...rsGroup,
|
|
75
|
+
version: this.args.version ?? '12.0',
|
|
76
|
+
minimalTlsVersion: '1.2',
|
|
77
|
+
identity: {
|
|
78
|
+
type: defaultUAssignedId ? sql.IdentityType.SystemAssigned_UserAssigned : sql.IdentityType.SystemAssigned,
|
|
79
|
+
userAssignedIdentities: defaultUAssignedId ? [defaultUAssignedId.id] : undefined,
|
|
80
|
+
},
|
|
81
|
+
primaryUserAssignedIdentityId: defaultUAssignedId?.id,
|
|
82
|
+
administratorLogin: adminLogin,
|
|
83
|
+
administratorLoginPassword: password.value,
|
|
84
|
+
keyId: encryptionKey?.id,
|
|
85
|
+
administrators: administrators
|
|
86
|
+
? {
|
|
87
|
+
administratorType: administrators.adminGroup?.objectId
|
|
88
|
+
? sql.AdministratorType.ActiveDirectory
|
|
89
|
+
: undefined,
|
|
90
|
+
azureADOnlyAuthentication: administrators.adminGroup?.objectId
|
|
91
|
+
? administrators.azureAdOnlyAuthentication ?? true
|
|
92
|
+
: false,
|
|
93
|
+
principalType: sql.PrincipalType.Group,
|
|
94
|
+
tenantId: helpers_1.azureEnv.tenantId,
|
|
95
|
+
sid: administrators.adminGroup?.objectId,
|
|
96
|
+
login: administrators.adminGroup?.displayName,
|
|
97
|
+
}
|
|
98
|
+
: undefined,
|
|
99
|
+
publicNetworkAccess: network?.privateLink
|
|
100
|
+
? sql.ServerNetworkAccessFlag.Disabled
|
|
101
|
+
: sql.ServerNetworkAccessFlag.Enabled,
|
|
102
|
+
}, {
|
|
103
|
+
...this.opts,
|
|
104
|
+
protect: lock ?? this.opts?.protect,
|
|
105
|
+
dependsOn: this.opts?.dependsOn ? this.opts.dependsOn : password,
|
|
106
|
+
parent: this,
|
|
107
|
+
});
|
|
108
|
+
this.createEncryptionProtector(server, encryptionKey);
|
|
109
|
+
this.addIdentityToRole('readOnly', server.identity);
|
|
110
|
+
return { server, password };
|
|
111
|
+
}
|
|
112
|
+
createNetwork(server) {
|
|
113
|
+
const { rsGroup, network } = this.args;
|
|
114
|
+
if (!network)
|
|
115
|
+
return;
|
|
116
|
+
//Allows Ip Addresses
|
|
117
|
+
if (network.acceptAllPublicConnection) {
|
|
118
|
+
new sql.FirewallRule(`${this.name}-allows-all-connection`, {
|
|
119
|
+
...rsGroup,
|
|
120
|
+
//firewallRuleName: 'allows-all-connection',
|
|
121
|
+
serverName: server.name,
|
|
122
|
+
startIpAddress: '0.0.0.0',
|
|
123
|
+
endIpAddress: '255.255.255.255',
|
|
124
|
+
}, { dependsOn: server, parent: this });
|
|
125
|
+
}
|
|
126
|
+
else if (network.ipRules) {
|
|
127
|
+
pulumi.output(network.ipRules).apply((ips) => (0, helpers_3.convertToIpRange)(ips).map((ip, i) => {
|
|
128
|
+
const n = `${this.name}-fwRule-${i}`;
|
|
129
|
+
return new sql.FirewallRule(n, {
|
|
130
|
+
...rsGroup,
|
|
131
|
+
//firewallRuleName: n,
|
|
132
|
+
serverName: server.name,
|
|
133
|
+
startIpAddress: ip.start,
|
|
134
|
+
endIpAddress: ip.end,
|
|
135
|
+
}, { dependsOn: server, parent: this });
|
|
136
|
+
}));
|
|
137
|
+
}
|
|
138
|
+
//Allows Subnets
|
|
139
|
+
if (network.subnets) {
|
|
140
|
+
pulumi.output(network.subnets).apply((subIds) => subIds.map((s) => {
|
|
141
|
+
const subName = vnet.vnetHelpers.getSubnetNameFromId(s.id);
|
|
142
|
+
new sql.VirtualNetworkRule(`${this.name}-sub-${subName}`, {
|
|
143
|
+
...rsGroup,
|
|
144
|
+
serverName: server.name,
|
|
145
|
+
virtualNetworkSubnetId: s.id,
|
|
146
|
+
ignoreMissingVnetServiceEndpoint: false,
|
|
147
|
+
}, { dependsOn: server, parent: this });
|
|
148
|
+
}));
|
|
149
|
+
}
|
|
150
|
+
//Private Link
|
|
151
|
+
if (network.privateLink) {
|
|
152
|
+
new vnet.PrivateEndpoint(this.name, {
|
|
153
|
+
...network.privateLink,
|
|
154
|
+
rsGroup,
|
|
155
|
+
type: 'sqlServer',
|
|
156
|
+
resourceInfo: server,
|
|
157
|
+
}, { dependsOn: server, parent: this });
|
|
158
|
+
}
|
|
159
|
+
}
|
|
160
|
+
createElasticPool(server) {
|
|
161
|
+
const { rsGroup, elasticPool } = this.args;
|
|
162
|
+
if (!elasticPool)
|
|
163
|
+
return undefined;
|
|
164
|
+
return new sql.ElasticPool(`${this.name}-elasticPool`, {
|
|
165
|
+
...elasticPool,
|
|
166
|
+
...rsGroup,
|
|
167
|
+
//autoPauseDelay: props.autoPauseDelay ?? azureEnv.isPrd ? -1 : 10,
|
|
168
|
+
preferredEnclaveType: sql.AlwaysEncryptedEnclaveType.VBS,
|
|
169
|
+
serverName: server.name,
|
|
170
|
+
maxSizeBytes: elasticPool.maxSizeGB ? elasticPool.maxSizeGB * 1024 * 1024 * 1024 : undefined,
|
|
171
|
+
}, { dependsOn: server, parent: this });
|
|
172
|
+
}
|
|
173
|
+
createEncryptionProtector(server, key) {
|
|
174
|
+
if (!key)
|
|
175
|
+
return undefined;
|
|
176
|
+
const { rsGroup, vaultInfo } = this.args;
|
|
177
|
+
// Enable a server key in the SQL Server with reference to the Key Vault Key
|
|
178
|
+
const keyName = pulumi.interpolate `${vaultInfo.resourceName}_${key.keyName}_${key.version}`;
|
|
179
|
+
//Server key maybe auto created by Azure
|
|
180
|
+
// const serverKey = new sql.ServerKey(
|
|
181
|
+
// `${sqlName}-serverKey`,
|
|
182
|
+
// {
|
|
183
|
+
// resourceGroupName: group.resourceGroupName,
|
|
184
|
+
// serverName: sqlName,
|
|
185
|
+
// serverKeyType: sql.ServerKeyType.AzureKeyVault,
|
|
186
|
+
// keyName,
|
|
187
|
+
// uri: encryptKey.url,
|
|
188
|
+
// },
|
|
189
|
+
// { dependsOn: sqlServer, retainOnDelete: true },
|
|
190
|
+
// );
|
|
191
|
+
//enable the EncryptionProtector
|
|
192
|
+
return new sql.EncryptionProtector(`${this.name}-encryptionProtector`, {
|
|
193
|
+
encryptionProtectorName: 'current',
|
|
194
|
+
resourceGroupName: rsGroup.resourceGroupName,
|
|
195
|
+
serverName: server.name,
|
|
196
|
+
serverKeyType: sql.ServerKeyType.AzureKeyVault,
|
|
197
|
+
serverKeyName: keyName, //serverKey.name,
|
|
198
|
+
autoRotationEnabled: true,
|
|
199
|
+
}, { dependsOn: server, parent: this });
|
|
200
|
+
}
|
|
201
|
+
createVulnerabilityAssessment(server) {
|
|
202
|
+
const { rsGroup, vulnerabilityAssessment, vaultInfo } = this.args;
|
|
203
|
+
if (!vulnerabilityAssessment)
|
|
204
|
+
return undefined;
|
|
205
|
+
//this will allows sql server to able to write log into the storage account
|
|
206
|
+
this.addIdentityToRole('contributor', server.identity);
|
|
207
|
+
const stgEndpoints = storage_1.storageHelpers.getStorageEndpointsOutputs(vulnerabilityAssessment.logStorage);
|
|
208
|
+
const storageKey = (0, helpers_2.getStorageAccessKeyOutputs)(vulnerabilityAssessment.logStorage, vaultInfo);
|
|
209
|
+
const alert = new sql.ServerSecurityAlertPolicy(`${this.name}-alert`, {
|
|
210
|
+
...rsGroup,
|
|
211
|
+
securityAlertPolicyName: 'default',
|
|
212
|
+
serverName: server.name,
|
|
213
|
+
emailAccountAdmins: true,
|
|
214
|
+
emailAddresses: vulnerabilityAssessment.alertEmails,
|
|
215
|
+
retentionDays: vulnerabilityAssessment.retentionDays ?? helpers_1.azureEnv.isPrd ? 30 : 7,
|
|
216
|
+
storageAccountAccessKey: storageKey,
|
|
217
|
+
storageEndpoint: stgEndpoints.blob,
|
|
218
|
+
state: 'Enabled',
|
|
219
|
+
}, { dependsOn: server, parent: this });
|
|
220
|
+
//Server Audit
|
|
221
|
+
new sql.ExtendedServerBlobAuditingPolicy(`${this.name}-audit`, {
|
|
222
|
+
...rsGroup,
|
|
223
|
+
auditActionsAndGroups: [
|
|
224
|
+
'SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP',
|
|
225
|
+
'FAILED_DATABASE_AUTHENTICATION_GROUP',
|
|
226
|
+
'BATCH_COMPLETED_GROUP',
|
|
227
|
+
],
|
|
228
|
+
serverName: server.name,
|
|
229
|
+
blobAuditingPolicyName: 'default',
|
|
230
|
+
isAzureMonitorTargetEnabled: true,
|
|
231
|
+
isStorageSecondaryKeyInUse: false,
|
|
232
|
+
predicateExpression: "object_name = 'SensitiveData'",
|
|
233
|
+
queueDelayMs: 4000,
|
|
234
|
+
retentionDays: vulnerabilityAssessment.retentionDays ?? helpers_1.azureEnv.isPrd ? 30 : 7,
|
|
235
|
+
state: 'Enabled',
|
|
236
|
+
isDevopsAuditEnabled: true,
|
|
237
|
+
storageAccountAccessKey: storageKey,
|
|
238
|
+
storageAccountSubscriptionId: helpers_1.azureEnv.subscriptionId,
|
|
239
|
+
storageEndpoint: stgEndpoints.blob,
|
|
240
|
+
}, { dependsOn: alert, parent: this });
|
|
241
|
+
//ServerVulnerabilityAssessment
|
|
242
|
+
new sql.ServerVulnerabilityAssessment(`${this.name}-assessment`, {
|
|
243
|
+
...rsGroup,
|
|
244
|
+
vulnerabilityAssessmentName: this.name,
|
|
245
|
+
serverName: server.name,
|
|
246
|
+
recurringScans: {
|
|
247
|
+
isEnabled: true,
|
|
248
|
+
emailSubscriptionAdmins: true,
|
|
249
|
+
emails: vulnerabilityAssessment.alertEmails,
|
|
250
|
+
},
|
|
251
|
+
storageContainerPath: pulumi.interpolate `${stgEndpoints.blob}/${server.name}`,
|
|
252
|
+
storageAccountAccessKey: storageKey,
|
|
253
|
+
}, { dependsOn: alert, parent: this });
|
|
254
|
+
}
|
|
255
|
+
createDatabases(server, password, elasticPool) {
|
|
256
|
+
const { rsGroup, databases, administrators, defaultUAssignedId } = this.args;
|
|
257
|
+
if (!databases)
|
|
258
|
+
return undefined;
|
|
259
|
+
return Object.keys(databases).map((k) => {
|
|
260
|
+
const props = databases[k];
|
|
261
|
+
const name = props.databaseName ?? k;
|
|
262
|
+
const db = new sql.Database(`${this.name}-${name}`, {
|
|
263
|
+
...props,
|
|
264
|
+
...rsGroup,
|
|
265
|
+
//autoPauseDelay: props.autoPauseDelay ?? azureEnv.isPrd ? -1 : 10,
|
|
266
|
+
preferredEnclaveType: sql.AlwaysEncryptedEnclaveType.VBS,
|
|
267
|
+
elasticPoolId: elasticPool?.id,
|
|
268
|
+
sku: elasticPool?.id ? undefined : props.sku,
|
|
269
|
+
serverName: server.name,
|
|
270
|
+
databaseName: name,
|
|
271
|
+
}, { dependsOn: elasticPool ? [server, password, elasticPool] : [server, password], parent: this });
|
|
272
|
+
const connectionString = administrators?.azureAdOnlyAuthentication
|
|
273
|
+
? administrators?.useDefaultUAssignedIdForConnection
|
|
274
|
+
? pulumi.interpolate `Server=tcp:${server.name}.database.windows.net,1433; Initial Catalog=${db.name}; Authentication="Active Directory Managed Identity"; User Id=${defaultUAssignedId?.principalId}; MultipleActiveResultSets=False; Encrypt=True; TrustServerCertificate=True; Connection Timeout=120;`
|
|
275
|
+
: pulumi.interpolate `Server=tcp:${server.name}.database.windows.net,1433; Initial Catalog=${db.name}; Authentication="Active Directory Default"; MultipleActiveResultSets=False;Encrypt=True; TrustServerCertificate=True; Connection Timeout=120;`
|
|
276
|
+
: pulumi.interpolate `Server=tcp:${server.name}.database.windows.net,1433; Initial Catalog=${db.name}; User Id=${server.administratorLogin}; Password=${password.value}; MultipleActiveResultSets=False; Encrypt=True; TrustServerCertificate=True; Connection Timeout=120;`;
|
|
277
|
+
this.addSecret(`${name}-conn`, connectionString);
|
|
278
|
+
return db;
|
|
279
|
+
});
|
|
280
|
+
}
|
|
281
|
+
}
|
|
282
|
+
exports.AzSql = AzSql;
|
|
283
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
import * as mysql from '@pulumi/azure-native/dbformysql';
|
|
2
|
+
import * as pulumi from '@pulumi/pulumi';
|
|
3
|
+
import { BaseArgs, BaseResourceComponent } from '../base';
|
|
4
|
+
import * as types from '../types';
|
|
5
|
+
export interface MySqlArgs extends BaseArgs, types.WithEncryptionEnabler, types.WithResourceGroupInputs, types.WithGroupRolesArgs, types.WithUserAssignedIdentity, types.WithNetworkArgs, Pick<mysql.ServerArgs, 'version' | 'storage' | 'administratorLogin' | 'maintenanceWindow' | 'backup' | 'highAvailability' | 'availabilityZone'> {
|
|
6
|
+
sku: {
|
|
7
|
+
/**
|
|
8
|
+
* The name of the sku, e.g. Standard_D32s_v3.
|
|
9
|
+
*/
|
|
10
|
+
name: pulumi.Input<string>;
|
|
11
|
+
/**
|
|
12
|
+
* The tier of the particular SKU, e.g. GeneralPurpose.
|
|
13
|
+
*/
|
|
14
|
+
tier: mysql.ServerSkuTier;
|
|
15
|
+
};
|
|
16
|
+
enableAzureADAdmin?: boolean;
|
|
17
|
+
databases?: Array<{
|
|
18
|
+
name: string;
|
|
19
|
+
}>;
|
|
20
|
+
lock?: boolean;
|
|
21
|
+
}
|
|
22
|
+
export declare class MySql extends BaseResourceComponent<MySqlArgs> {
|
|
23
|
+
readonly id: pulumi.Output<string>;
|
|
24
|
+
readonly resourceName: pulumi.Output<string>;
|
|
25
|
+
constructor(name: string, args: MySqlArgs, opts?: pulumi.ComponentResourceOptions);
|
|
26
|
+
getOutputs(): {
|
|
27
|
+
id: pulumi.Output<string>;
|
|
28
|
+
resourceName: pulumi.Output<string>;
|
|
29
|
+
};
|
|
30
|
+
private createMySql;
|
|
31
|
+
private createNetwork;
|
|
32
|
+
private enableADAdmin;
|
|
33
|
+
private createDatabases;
|
|
34
|
+
private getUAssignedId;
|
|
35
|
+
}
|